Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-06-2024 14:49

General

  • Target

    3928-3-0x0000000000240000-0x0000000000838000-memory.exe

  • Size

    6.0MB

  • MD5

    b756bcc85c0e4771dd0475d8ff543b79

  • SHA1

    cc64a7042cb1aebaaf827d32c9eda593e119687e

  • SHA256

    86a625773d79ac15b3c76b8c5ebe5d7a9fbb9fb604ca142e125422a3d30562c0

  • SHA512

    3f9c6be90deea402c7029d646bb57637a3814c9fe1121999ccefd5c0f6e726a4a7b39703c915224cced24ed850b12f7a5536ed0cf5fc4a40fbacc0d02d3de46e

  • SSDEEP

    98304:rqwMlFrbAo+1j6qQLJGWhDCByLFuwyHkA2KsE7edoNvZ+Z+WduzlPAney9:ORFrUo2jRQLJGAau9E/vA+Ene

Score
10/10

Malware Config

Signatures

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

Processes

  • C:\Users\Admin\AppData\Local\Temp\3928-3-0x0000000000240000-0x0000000000838000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\3928-3-0x0000000000240000-0x0000000000838000-memory.exe"
    1⤵
      PID:2688
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4344,i,11049150160560877369,2866371920339304689,262144 --variations-seed-version --mojo-platform-channel-handle=3944 /prefetch:8
      1⤵
        PID:736

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2688-0-0x0000000000240000-0x0000000000838000-memory.dmp

        Filesize

        6.0MB